KVM: s390: fix locking order problem in enable_sie